Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fDbZzFIAy-4rrzY0Ll8k8wfQjiY.roa
File: fDbZzFIAy-4rrzY0Ll8k8wfQjiY.roa (raw, json)
Hash identifier: tnpXJre7gCsgYdKVVmuSAgeP0ha3ijmkPu0fyVUTK6E=
Subject key identifier: 7C:36:D9:CC:52:00:CB:EE:2B:AF:36:34:2E:5F:24:F3:07:D0:8E:26
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 07DC8E9F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fDbZzFIAy-4rrzY0Ll8k8wfQjiY.roa
Signing time: Sat 01 Jan 2022 08:01:01 +0000
ROA not before: Sat 01 Jan 2022 08:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57045
IP address blocks: 80.76.41.0/24 maxlen: 24
185.177.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131894943 (0x7dc8e9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 08:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c36d9cc5200cbee2baf36342e5f24f307d08e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:c5:f6:38:04:5d:71:64:88:cb:f4:de:f8:
7c:d9:e5:09:d8:87:18:ee:96:bb:81:f7:7e:e4:a3:
24:12:f3:15:1f:9b:26:34:7a:c4:b9:a7:83:07:d2:
f3:3b:41:95:dc:db:e3:b2:d2:a6:f2:12:6e:6e:b0:
d9:f5:90:b9:00:fe:88:e3:f8:96:c4:2c:f4:f7:f1:
07:da:73:c6:4c:62:6c:0a:e8:fe:04:da:3a:e0:4d:
48:8a:61:fc:81:f2:6b:26:8a:1e:c6:32:85:90:ce:
85:ea:af:2d:3c:2e:06:89:83:29:6d:3c:a0:d7:79:
98:79:b9:92:63:43:79:ea:c1:15:cb:9a:8b:3a:08:
f7:dc:1d:fa:a3:04:a8:4c:17:fd:27:82:8d:90:f2:
f0:97:24:40:59:79:5e:21:2b:c4:a0:9e:e4:7d:37:
fe:8e:fa:13:b0:17:01:9b:77:2e:1f:16:29:af:68:
db:52:ee:0c:f4:fd:f9:49:c1:46:65:c9:2e:26:5c:
d3:f4:58:63:19:87:55:29:97:fa:ef:66:39:9f:1a:
48:67:5a:74:df:4c:8f:d7:c3:b8:dc:cc:69:c4:d7:
a9:9f:d4:64:78:2c:05:c8:5b:8c:88:bc:8a:ac:75:
81:4f:f5:fc:87:0f:01:f3:92:1e:dd:38:8d:34:5b:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:D9:CC:52:00:CB:EE:2B:AF:36:34:2E:5F:24:F3:07:D0:8E:26
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/fDbZzFIAy-4rrzY0Ll8k8wfQjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.41.0/24
185.177.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0e:41:e9:9c:1e:9f:d0:ee:3f:79:88:c6:1a:f3:51:ed:85:
5f:76:ae:84:31:2c:b1:5d:f1:f6:4b:08:a1:bb:2b:36:91:da:
22:26:6d:c7:aa:13:32:92:55:6c:98:d9:62:ed:24:a7:09:65:
37:b5:0b:43:e8:1a:a0:21:dd:b8:f1:1d:80:df:85:02:30:66:
0f:6c:5c:7a:77:52:ba:be:b6:d1:51:f4:11:e4:48:2a:2d:af:
a9:59:cc:61:01:9d:57:90:23:d3:59:01:0e:90:c4:42:ef:a5:
a7:93:9d:aa:66:49:a9:9d:b3:64:79:32:24:44:7b:dc:8c:38:
88:c3:a0:d1:ee:df:db:aa:ae:ea:de:19:9f:cb:7b:80:1d:93:
e5:78:bd:5e:be:82:fb:9f:86:1e:a0:88:d3:d4:35:ef:b6:08:
ed:fd:b6:58:72:be:be:8c:d8:d2:ff:57:01:4a:59:bc:8e:fc:
d1:12:91:06:ba:bc:c2:98:c0:13:fb:d1:ab:02:2f:72:15:7a:
75:d7:b0:91:ab:b9:63:f2:38:e2:bc:24:3d:39:1c:82:55:54:
ce:26:68:ca:c5:c8:d1:c3:64:a3:d7:d5:48:ea:a5:45:0f:e2:
c2:3b:21:d0:89:dc:f9:1e:d2:b2:34:50:2e:42:1e:81:ae:01:
0a:34:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:18 2025 by rpki-client